Research

Publications

Secure Kubernetes Workload Deployment with Automated Enforcement of Cluster-Defined Policies

Matthew Rossi, Michele Beretta, Dario Facchinetti, Stefano Paraboschi

POSTER: Policy-driven security-aware scheduling in Kubernetes

Matthew Rossi, Michele Beretta, Dario Facchinetti, Stefano Paraboschi

POSTER: Transparent Temporally-Specialized System Call Filters

Matthew Rossi, Michele Beretta, Dario Facchinetti, Stefano Paraboschi

Supporting Data Owner Control in IPFS Networks

Marco Abbadini, Michele Beretta, Sabrina De Capitani di Vimercati, Dario Facchinetti, Sara Foresti, Gianluca Oldani, Stefano Paraboschi, Pierangela Samarati, Matthew Rossi

Lightweight Cloud Application Sandboxing

Marco Abbadini, Michele Beretta, Dario Facchinetti, Gianluca Oldani, Matthew Rossi, Stefano Paraboschi

POSTER: Leveraging eBPF to enhance sandboxing of WebAssembly runtimes

Marco Abbadini, Michele Beretta, Dario Facchinetti, Gianluca Oldani, Matthew Rossi, Stefano Paraboschi